The buddyboss-media plugin up to and including 3.2.3 for WordPress has stored XSS.
buddyboss buddymoss media